Anonymous_User Absent Member.
Absent Member.
361 views

DTAP deployment of large NAM configuration

Hi everyone,

for my current project I am looking at deployment of a large NAM
configuration (100s of everything).

All of the policies and protected resources will have to be altered for
our next production release. This is currently planned as manual work
in the live environment, resulting in considerable downtime.
I am looking for a way to make all of these changes offline, on a
backup file for example, and then import the altered configuration to
minimize downtime.

Has anyone done this before, and what are the experiences?
KR,

Mark


--
i d f o c u s
Identity | Access | Security
http://www.idfocus.nl

0 Likes
3 Replies
Anonymous_User Absent Member.
Absent Member.

Re: DTAP deployment of large NAM configuration

Mark van Reijn wrote:

> Hi everyone,
>
> for my current project I am looking at deployment of a large NAM
> configuration (100s of everything).
>
> All of the policies and protected resources will have to be altered
> for our next production release. This is currently planned as manual
> work in the live environment, resulting in considerable downtime. I
> am looking for a way to make all of these changes offline, on a
> backup file for example, and then import the altered configuration to
> minimize downtime.
>
> Has anyone done this before, and what are the experiences?
> KR,


Hey mark,

we've done something similar where we imported a large amount of config
into prod and it was quite a bit of a mess. Lots of manual editing,
constantly checking app_sc.log, errors etc. I'm not sure how many
policies you are referring to but since we only had to do an import
which was already quite painful I can only imagine how painful an
update would work. The only thing I could come up with is to LDIF the
info out, modify it and then import it again and then push the config
to the AG's but I'm not sure how well that would work. I know that the
policies have their own container in the embedded directory but I can't
quite remember how its all stored.

--
Cheers,
Edward
0 Likes
Knowledge Partner
Knowledge Partner

Re: DTAP deployment of large NAM configuration

On 11/28/2012 6:32 AM, Edward van der Maas wrote:
> Mark van Reijn wrote:
>
>> Hi everyone,
>>
>> for my current project I am looking at deployment of a large NAM
>> configuration (100s of everything).
>>
>> All of the policies and protected resources will have to be altered
>> for our next production release. This is currently planned as manual
>> work in the live environment, resulting in considerable downtime. I
>> am looking for a way to make all of these changes offline, on a
>> backup file for example, and then import the altered configuration to
>> minimize downtime.
>>
>> Has anyone done this before, and what are the experiences?
>> KR,

>
> Hey mark,
>
> we've done something similar where we imported a large amount of config
> into prod and it was quite a bit of a mess. Lots of manual editing,
> constantly checking app_sc.log, errors etc. I'm not sure how many
> policies you are referring to but since we only had to do an import
> which was already quite painful I can only imagine how painful an
> update would work. The only thing I could come up with is to LDIF the
> info out, modify it and then import it again and then push the config
> to the AG's but I'm not sure how well that would work. I know that the
> policies have their own container in the embedded directory but I can't
> quite remember how its all stored.


My request in RMS for Designer for Access Manager was denied... Hmm...

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: DTAP deployment of large NAM configuration

Geoffrey Carman wrote:

> On 11/28/2012 6:32 AM, Edward van der Maas wrote:
> > Mark van Reijn wrote:
> >
> > > Hi everyone,
> > >
> > > for my current project I am looking at deployment of a large NAM
> > > configuration (100s of everything).
> > >
> > > All of the policies and protected resources will have to be
> > > altered for our next production release. This is currently
> > > planned as manual work in the live environment, resulting in
> > > considerable downtime. I am looking for a way to make all of
> > > these changes offline, on a backup file for example, and then
> > > import the altered configuration to minimize downtime.
> > >
> > > Has anyone done this before, and what are the experiences?
> > > KR,

> >
> > Hey mark,
> >
> > we've done something similar where we imported a large amount of
> > config into prod and it was quite a bit of a mess. Lots of manual
> > editing, constantly checking app_sc.log, errors etc. I'm not sure
> > how many policies you are referring to but since we only had to do
> > an import which was already quite painful I can only imagine how
> > painful an update would work. The only thing I could come up with
> > is to LDIF the info out, modify it and then import it again and
> > then push the config to the AG's but I'm not sure how well that
> > would work. I know that the policies have their own container in
> > the embedded directory but I can't quite remember how its all
> > stored.

>
> My request in RMS for Designer for Access Manager was denied... Hmm...


It would be nice to be able to this more easily....I've made a few
requests as well in the past but its more of a nice to have rather than
critical functionality I guess (well, thats probably how novell
perceives it)

--
Cheers,
Edward
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.